Vulnerability Toolkit Catalog

Remote code execution vulnerability in Microsoft SharePoint Server allowing unauthenticated attackers to execute arbitrary code.

Multiple critical vulnerabilities in Langflow AI framework allowing remote code execution through crafted API requests.

Authentication bypass vulnerability in PAN-OS management interface leading to remote code execution.

Remote code execution in FortiSandbox through deserialization of untrusted data.

Remote code execution via specially crafted search queries in Splunk Enterprise.

Remote code execution through RPC interface in llama.cpp AI inference server.

Deserialization vulnerability in Apache ActiveMQ Jolokia interface allowing remote code execution.

Remote code execution via Apache Tomcat Cluster communication ( tribes channel).

Authentication bypass in cPanel WHM leading to full root-level remote code execution.

Remote code execution in Apache Syncope through JEXL expression evaluation.

Remote code execution in nginx through crafted HTTP/2 frames (rift module).

Remote code execution in React2Shell framework through server-side rendering injection.

Command injection in Edimax router web interface allowing full device takeover.

Command injection in Edimax router management interface.

Command injection vulnerability in Edimax device firmware.

Information disclosure in Edimax router configuration endpoints.

Authenticated command injection in Edimax router admin panel.

Command injection via setdmzcfg endpoint in TotoLink A8000RU router.

Buffer overflow in Telnet NEW-ENVIRON option handling.

Buffer overflow in Telnetd LINEMODE SLC option processing.

Remote code execution in Laravel Ignition via phar:// deserialization (historically significant, still relevant for unpatched deployments).

Remote code execution in KMW CCTV camera systems through authenticated command injection.

Authentication bypass in Cisco SD-WAN Manager leading to remote code execution.

Remote code execution via OGNL injection in Apache Struts multipart parser.

Authentication bypass in Ivanti Connect Secure VPN allowing unauthenticated remote code execution.

Stack-based buffer overflow in Ivanti Policy Secure allowing unauthenticated RCE (actively exploited in the wild).

Stack-based buffer overflow in Ivanti Connect Secure SSL VPN, exploited by UNC17885 (Chinese state actor).

Critical command injection in PAN-OS GlobalProtect gateway (CVSS 10.0), exploited by UNC4841 Chinese state actor.

Command injection in Ivanti Connect Secure and Policy Secure web components, chained with CVE-2023-46805 for mass exploitation.

Authentication bypass in Ivanti Connect Secure, chainable with CVE-2024-21887 for unauthenticated RCE.

Authentication bypass in FortiGate SSL VPN leading to remote code execution on the device.

Format string vulnerability in FortiOS fgfmd daemon allowing remote code execution via specially crafted packets.

Out-of-bounds write in FortiOS SSL VPN, exploited in the wild by Volt Typhoon (Chinese state actor).

Sensitive information disclosure in Citrix NetScaler ADC and Gateway (Citrix Bleed), heavily exploited by LockBit ransomware affiliates.

Authentication bypass in PAN-OS management web interface allowing privileged access to restricted resources.

Remote code execution in Apache HTTP Server via mod_rewrite regex buffer overflow.

Remote code execution in Microsoft Exchange Server via SSRF in Outlook Web Access (ProxyShell variant).

Deserialization of untrusted data in Microsoft SharePoint Server allowing remote code execution.

Remote code execution in Windows SMB Server via crafted SMB packet (Wormable, EternalBlue-class).

Buffer overflow in Windows LDAP Server allowing unauthenticated remote code execution (ZeroLogon-class).

Deserialization vulnerability in Progress Telerik UI for ASP.NET AJAX allowing remote code execution.

Remote code execution via SpEL expression injection in Spring Framework parameter binding.

Remote code execution in Apache OFBiz via pre-authentication deserialization.

Privilege escalation in Kubernetes API server via crafted TokenReview request allowing cluster-admin impersonation.

Server-side request forgery and path traversal in Next.js middleware allowing file read on the server.

Authentication bypass in Grafana dashboard sharing allowing unauthenticated access to private dashboards.

Remote code execution in GitLab CE/EE via project import deserialization vulnerability.

Lua sandbox escape in Redis allowing authenticated users to execute arbitrary code on the server.

Remote code execution in Elasticsearch Watcher via Groovy script injection.

Remote code execution in Confluence Server via OGNL injection in velocity templates.

Remote code execution in Zimbra Collaboration Suite via postmail.jsp file upload vulnerability.

Remote code execution in Jenkins via sandbox bypass in Groovy deserialization.

Deserialization vulnerability in Apache Tomcat JDBC connection pool allowing RCE via JNDI injection.

Denial of service in Apache MINA via crafted FTP command sequence causing infinite loop.

Unauthenticated command injection in D-Link DIR-823 router via Set_sysTimezone handler.

Unauthenticated command injection in TP-Link Archer AX73 via debug menu endpoint.

Authentication bypass in Netgear Orbi router admin panel via hardcoded credentials.

Command injection in ASUS router firmware via custom DNS field in web GUI.